Hi, These patchset fixes nftables offload for the two cases: - matching on exact IP address - matching on prefix IP address Tested with mlx5. Pablo Neira Ayuso (2): netfilter: nftables_offload: set address type in control dissector netfilter: nftables_offload: build mask based from the matching bytes include/net/netfilter/nf_tables_offload.h | 7 +++ net/netfilter/nf_tables_offload.c | 18 ++++++ net/netfilter/nft_cmp.c | 8 +-- net/netfilter/nft_meta.c | 16 +++--- net/netfilter/nft_payload.c | 68 +++++++++++++++++------ 5 files changed, 88 insertions(+), 29 deletions(-) -- 2.20.1